Hands-On Summary
I took the base system, added it to the VI-BRANCH workgroup, and changed the Computer Name to match the VI workstation naming conventions. Since VI requires the use of Internet Explorer 6, I downloaded the IE7-9BlockerToolkits, which included a script and a Group Policy (GP) Template, and used them to prevent Internet Explorer from upgrading beyond version 6. I ran the scripts, and then added the GP templates to Local Computer Policy > Computer Configuration > Administrative Templates in the GP mmc addin.
I implemented many of the other VI IT Policies using Local GP. Windows Logon, Firewall, Updates, and ScreenSaver settings were all managed using Local GP.
Lacking Anti-Virus and Anti-Spyware software, I installed Symantec Anti-Virus 10.1.6, and Windows Defender. The Symantec installer was provided on VI-Server-01, and I downloaded the Windows Defender installer.
As an alternative to Internet Explorer 6, I installed Firefox 3.6.16. While that isn’t the most recent version of Firefox, it is more compatible with most websites. I installed AdBlock Plus browser extension for Firefox for both the Administrator and Pat Smith users.
For a PDF viewer I downloaded and installed Acrobat Reader X.
I installed the network printer using a standard TCP/IP port. The port name included the Building, Room Number, and IP Address of the printer.
I created Pat Smith an account, following the naming convention, first initial last name. I configured her view, Start Menu, and Desktop settings per VI policy. I configured her Outlook Email Client to check her VI email account. I mapped a network drive to the U: drive letter, and created a shortcut to another network location on the desktop. After that I created Pat an account on the server, and granted the account membership in the VI-Bdgt-Rv and VI-Contract-Tch groups. I also created Pat a user folder on the server that only she has access to.